Security Directory

T

Ziemas riepas, vasaras riepas, TavasRiepas.lv

tavasriepas.lv

42

TavasRiepas.lv is an e-commerce and service platform specializing in the sale and servicing of tires and wheels, primarily targeting vehicle owners in the Baltic region. The website offers a comprehensive catalog of tires and wheels, including detailed search and filtering options, and promotes services such as tire replacement and delivery across the Baltics. The business positions itself as a trusted partner with guarantees and customer-friendly policies like a 14-day return period. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and various UI enhancement libraries. The site is well-structured with good SEO metadata and mobile optimization, providing a positive user experience. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS and includes Google-managed analytics with consent set to denied by default, indicating some privacy awareness. However, it lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data due to query limits restricts the ability to fully assess domain legitimacy and registration consistency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparent contact and incident response information to improve trust and regulatory adherence.

É

Élection du Service Client de l'Année

escda.fr

53

Élection du Service Client de l'Année is a French organization that independently evaluates and awards companies and public services for excellence in customer service. Established in 2013, it operates a recognized label and organizes annual events to promote quality in customer relations. The website serves as an information portal for candidates, consumers, and partners, offering news, laureate listings, and international links. Technically, the site uses a modern stack including jQuery, Bootstrap, and Google Analytics, hosted by OVH, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic but includes cookie consent and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

E

European Technology and Innovation Platform on Renewable Heating and Cooling

rhc-platform.org

52

The European Technology and Innovation Platform on Renewable Heating and Cooling (RHC) is a specialized platform that unites stakeholders from biomass, geothermal, solar thermal, and heat pump sectors to promote renewable energy technologies for heating and cooling. The platform serves as a collaborative hub for experts, investors, and policymakers, offering strategic guidance, policy support, and project acceleration services. The website reflects a medium-sized, well-branded organization with a clear focus on the energy sector in Europe, founded around 2019. Technically, the website is built on WordPress with modern JavaScript frameworks such as React and uses Yoast SEO for optimization. It integrates Google Analytics for visitor tracking and employs HTTPS with good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. The technical stack is modern but could benefit from enhanced security headers and more comprehensive privacy compliance. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX requests, indicating some security best practices. However, it lacks explicit security headers and does not provide clear privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS registrant data reduces domain trustworthiness, though the website content and structured data suggest legitimacy. Overall, the site is functional, professional, and relevant to its sector but should improve privacy disclosures, security headers, and WHOIS transparency to enhance trust and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and regularly auditing third-party scripts.

ETIP-Geothermal is a European stakeholder platform endorsed by the European Commission to accelerate geothermal technology development across Europe. It serves as a collaborative forum for industry, academia, and research centers to reduce costs and promote innovation in geothermal energy. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and it integrates Google Analytics and Tag Manager for user tracking with appropriate cookie consent mechanisms. The site is well-structured, professionally designed, and provides comprehensive content including events, news, and working group information. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is strong with clear policies and consent banners. Overall, the site reflects a credible and trustworthy organization with active community engagement and EU funding support.

S

Synergy BV

enlit.world

66

Enlit World is a professional media and community platform focused on the energy transition sector, operated by Synergy BV, a company registered in the Netherlands. The platform offers a wide range of services including news, industry reports, directories, podcasts, and events that serve energy professionals and stakeholders globally. The website is well-structured, with consistent branding and a clear focus on energy and transport sectors. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

L

Latvijas Bankas Naudas skola

naudasskola.lv

58

Latvijas Bankas Naudas skola is an official educational website operated by Latvijas Banka, aimed at improving financial literacy among Latvian citizens, including students and teachers. The platform offers a wide range of resources such as budgeting tools, savings and investment information, insurance, credit guidance, fraud awareness, games, podcasts, videos, and infographics. The website is well-branded, professionally designed, and provides comprehensive content in the Latvian language. Technically, it is built on Drupal 10 and integrates modern analytics and user experience tools like Google Analytics, Microsoft Clarity, Hotjar, and ReadSpeaker, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and uses cookie consent mechanisms, reflecting good security hygiene. However, the absence of explicit contact information and terms of service pages, along with unavailable WHOIS data due to query limits, slightly reduce the overall trust score. Overall, the site presents a low-risk profile with strong educational and governmental backing.

D

Dukascopy Bank

dukascoin.com

66

Dukascoin.com is the official website for Dukascoin (DUK+), a cryptocurrency project issued by Dukascopy Bank, a reputable Swiss financial institution. The site promotes the cryptocurrency with features such as free initial coins, staking rewards, and integrated banking services including multi-currency accounts and crypto lending. The business model leverages the trust and regulatory compliance of a Swiss bank to position Dukascoin as a credible crypto asset in the finance sector. Technically, the website uses standard web technologies including jQuery and Google Analytics, hosted on AWS infrastructure, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain locked with multiple prohibitions, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security policies.

D

Domains By Proxy, LLC (registrant proxy)

911p2p.io

44

911 Crypto P2P operates as a peer-to-peer cryptocurrency exchange platform specializing in fiat settlement for crypto transactions. The website targets cryptocurrency traders seeking direct exchange services with fiat currency integration. Positioned as a niche player in the crypto finance sector, it leverages partnerships with related financial and crypto services such as Dukas.io and Dukascoin. The platform was established in 2021 and maintains a modern, mobile-optimized web presence with consistent branding and moderate trust indicators.

D

Dukascopy Bank

dukas.io

64

Dukascopy Bank operates a specialized crypto services platform offering clients the ability to buy, sell, store, and trade cryptocurrencies, including their proprietary Dukascoin. The bank leverages its Swiss regulatory status and FINMA authorization to provide fiduciary custody and blockchain operations, positioning itself as a pioneer in regulated crypto banking. The website reflects a mature digital infrastructure with integration of Google Tag Manager and AWS hosting, delivering a professional and mobile-optimized user experience. Security posture is solid with HTTPS and domain protections, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is currently weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-branded but would benefit from enhanced transparency and security disclosures.

D

Dukascopy Bank SA

dukascopy.bank

72

Dukascopy Bank SA is a Swiss financial institution offering a broad range of banking services including multi-currency accounts, private and corporate banking, investment options, and payment card solutions. The bank emphasizes Swiss precision and innovation, providing a mobile app for seamless banking access. The website reflects a mature digital presence with professional design and comprehensive content targeting individuals and businesses seeking Swiss banking services. Technically, the site employs modern JavaScript libraries, analytics tools, and security best practices including HTTPS and security headers. However, public WHOIS data is unavailable due to .bank domain privacy policies, which is typical for regulated banking domains. The security posture is strong with no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

N

NJ TRANSIT

njtransitresilienceprogram.com

48

The NJ TRANSIT Resilience Program website serves as an informational platform dedicated to communicating the agency's efforts to strengthen and fortify transit infrastructure against extreme weather events and future transportation demands. The site targets NJ TRANSIT customers, stakeholders, and government entities, providing project overviews, environmental reviews, and public engagement opportunities. The business operates within the public transportation sector, funded primarily through federal grants, positioning itself as a key regional transit authority focused on resilience and sustainability. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Soliloquy Slider, leveraging Google Analytics for user tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which could improve its security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust and support accessibility. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security configurations, and more transparent contact information to strengthen trust and regulatory adherence.

N

NJ TRANSIT

njtplans.com

69

NJ TRANSIT operates the largest state transit system in the United States, providing essential public transportation services including trains, buses, light rail, and ADA paratransit to nearly one million daily riders in New Jersey and surrounding metropolitan areas. The organization supports a significant regional economy and is focused on modernizing and expanding its infrastructure through strategic and capital planning initiatives aimed at 2030. The website reflects a mature digital presence with a professional design and comprehensive service information, targeting residents and commuters reliant on public transit. Technically, the website leverages modern web technologies such as Nuxt.js for server-side rendering, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and HubSpot, and uses Google Fonts and translation services to enhance accessibility and user experience. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be improved. From a security perspective, the site enforces HTTPS and uses controlled script loading via Google Tag Manager, but lacks explicit security headers and published privacy or cookie policies on the analyzed page. No WHOIS registrant data is available, which slightly reduces trustworthiness, though the official branding and social media presence support legitimacy. There is no visible vulnerability disclosure or incident response contact information. Overall, NJ TRANSIT's website is a credible and professional platform for public transportation information, but it would benefit from enhanced privacy compliance, clearer security policies, and improved transparency in domain registration data to strengthen trust and regulatory adherence.

G

Grupo Nacional Provincial S.A.B.

gnp.com.mx

67

Grupo Nacional Provincial S.A.B. (GNP Seguros) is a leading Mexican insurance company offering a broad portfolio of insurance products including auto, medical, life, home, and pet insurance. The company targets both individual and business customers within Mexico, positioning itself as a financially solid and trusted insurer. The website reflects a mature digital presence with comprehensive product information, online quoting tools, and client portals. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools such as Google Tag Manager, Adobe Analytics, Facebook Pixel, and Hotjar, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and bot protection via reCAPTCHA, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, well-branded, and trustworthy, supporting GNP's market position as a major insurance provider in Mexico.

M

Mass Portal SIA

massportal.com

58

Mass Portal SIA is a specialized manufacturer and service provider in the precision 3D printing industry, offering a range of products including desktop and standalone 3D printers, filament dryers, and automated printfarm solutions. Their services extend to printing services and custom solution development, targeting innovators, engineers, and manufacturing professionals. The company positions itself as a niche player focusing on high-quality, flexible 3D printing technologies. Technically, the website is built on the Mozello CMS platform, leveraging Amazon Cloudfront for content delivery and using common JavaScript libraries such as jQuery and Fancybox. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site is mobile-optimized with good navigation and professional design, though some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS but lacks several important security headers, and no explicit privacy or cookie policies are present, which impacts compliance posture. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration issues or privacy protection that is not disclosed. Social media presence and professional branding support legitimacy, but the missing WHOIS data warrants caution. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance improvements, and verification of domain registration status to strengthen trust and reduce risk.

S

SteamTalmark

steam.nl

60

SteamTalmark is a Dutch communication agency specializing in employer branding and recruitment communication services. The company focuses on aligning the ambitions of talents and employers through creative campaigns, career sites, and integrated talent journeys. Their market position is that of a specialized boutique agency with a strong local presence in the Netherlands, supported by offices in Amsterdam and Utrecht. The website reflects a professional and consistent brand image with clear service offerings and client case studies. Technically, the site uses modern JavaScript frameworks such as Vue.js and GSAP, integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Cookiebot for GDPR compliance. Security posture is good with HTTPS enforced, though some standard security headers are not explicitly detected in the HTML content. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is well designed, user-friendly, and trustworthy, supporting the company's business credibility effectively.

L

Labiana Life Sciences S.A.

labiana.com

54

Labiana Life Sciences S.A. is a well-established pharmaceutical company based in Spain, specializing in both animal and human health sectors. The company offers a broad portfolio of products and contract development and manufacturing services (CDMO), supported by multiple subsidiaries including Veterinarski Zavod Subotica and Zoleant Pharmaceuticals International. The website reflects a professional and consistent brand image, targeting pharmaceutical companies, investors, and health professionals. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with comprehensive policies and GDPR adherence. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility.

M

MF Shipping Group

mfshippinggroup.nl

68

MF Shipping Group operates as a specialized international ship management company focusing on multi-purpose vessels, tankers, and cement carriers. The company provides a comprehensive suite of services including technical ship management, crew management, quality assurance, project management, and financial management. Their market position is supported by a fleet of approximately 50 vessels and a workforce of 900 seafarers alongside 80 office employees, indicating a medium-sized enterprise with a strong presence in the maritime transportation sector. Technically, the website demonstrates a mature digital infrastructure utilizing modern web technologies such as Google Tag Manager, Swiper.js for interactive content, and cookie consent mechanisms, ensuring good performance, mobile optimization, and SEO practices. The site is well-structured, multilingual, and integrates social media widgets to enhance engagement. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable anomaly, although the website's professionalism and trust indicators mitigate immediate concerns. Overall, the website presents a low risk with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around incident response would further enhance trust and compliance.

F

Food Union

rpk.lv

71

Food Union is a well-established Latvian dairy and food manufacturing company with a leading market position since 1909. The company operates a professional website primarily targeting consumers and business partners in the Baltic region. The site provides comprehensive information about their products, brands, sustainability efforts, and corporate details. Technically, the website is built on a modern React framework, integrating Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and explicit security policy disclosures. The absence of WHOIS data due to query limits restricts full domain trust verification, though the website content and external links suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security policy transparency and incident response readiness.

M

MadSword Studios

madsword.com

57

MadSword Studios is a small technology company based in Latvia specializing in the development of mobile and VR games across platforms including iOS, Android, and Windows Phone. Their portfolio includes a variety of casual, puzzle, and VR games targeting mobile users and social network gamers. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses common JavaScript libraries and Google services, hosted behind Cloudflare DNS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain registration protections in place, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. Business credibility is supported by clear contact information and social media presence. Overall, the website is functional and trustworthy but could improve in privacy compliance and security best practices.

S

SIA "RAIBUM"

raibum.com

56

RAIBUM is a small Latvian retail company specializing in personalized luggage and travel accessories. The company offers customers the ability to upload custom images or select from pre-designed options to create unique suitcases. Founded in 2016, RAIBUM targets travelers who desire distinctive and personalized travel gear, positioning itself as a niche player in the luggage market. The website reflects a professional e-commerce platform with clear navigation and a focus on user experience. Technically, the website employs modern web technologies including Vue.js, Google Analytics, Facebook Pixel, and GSAP for animations. The site is mobile optimized and uses HTTPS, ensuring secure data transmission. However, some security best practices such as DNSSEC and security headers are not implemented, representing areas for improvement. The domain registration is consistent with the business history and shows no suspicious patterns. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is basic, with a cookie consent banner present but no dedicated privacy policy page found. Contact information is comprehensive, including phone, email, physical address, and a contact form. Overall, RAIBUM presents a trustworthy and professional online presence with room to enhance security and privacy compliance. Strategic improvements in DNS security, security headers, and transparency around data protection would strengthen the company's security posture and customer trust.

M

M&H Engineering & Consulting for The Oil & Gas Industry

mhes.com

46

M&H Engineering & Consulting for The Oil & Gas Industry is a professional services firm specializing in engineering, consulting, and sustainability services tailored to the oil and gas sector. With a domain age dating back to 2000, the company presents itself as an established player offering a range of services including enterprise asset management, technical writing, and risk management. The website is built on WordPress using modern plugins such as LayerSlider and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. The site is hosted by GoDaddy.com, LLC and uses HTTPS, ensuring basic transport security. However, there is no evidence of advanced security headers or DNSSEC implementation, which are recommended for enhanced security posture. The absence of privacy and cookie policies, as well as lack of explicit contact information, suggests gaps in privacy compliance and user trust facilitation. Overall, the website is professional and content-rich but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

Storm International Management Services B.V. is an established international casino operator with over 30 years of experience managing high-end gaming and entertainment facilities primarily in Georgia, Armenia, and Germany. The company emphasizes a branded gaming experience through its Shangri La casinos and proprietary casino management software. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site uses CMS Made Simple and modern JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic, with no explicit cookie consent or comprehensive privacy policy found. Overall, the website is credible and functional but would benefit from enhanced security and privacy practices.

J

JSJ Corp

jsjcorp.com

58

JSJ Corporation is a well-established growth firm and holding company specializing in manufacturing, distribution, and service businesses with a global footprint. The company emphasizes long-term investment and partnership with innovative companies aligned with its core values. The website reflects a professional corporate presence with clear business descriptions, portfolio highlights, and community impact initiatives. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though no explicit security policy or incident response information is published. The absence of WHOIS registration data is a notable concern for domain legitimacy, warranting further verification. Overall, the website presents a credible and professional image with minor gaps in security transparency and legal documentation.

V

ValPro

valpro.co.in

51

ValPro is a boutique investment banking and financial advisory firm based in India, operating since 2005 as an initiative of the ANG Group. The company offers a comprehensive suite of services including mergers and acquisitions, portfolio management, startup funding, ESG advisory, and business development. Their market position is strengthened by a seasoned management team and advisory board with extensive industry experience. The website is built on a modern WordPress platform with professional design and SEO optimization, supporting a good user experience and mobile responsiveness. Security posture is solid with HTTPS and reCAPTCHA integration, though lacking explicit privacy and cookie policies. Overall, the digital maturity is moderate with room for improvement in privacy compliance and security disclosures.

The website arutec.lv is currently in maintenance mode, presenting minimal content and no active business information. The site uses WordPress CMS with the Divi theme and integrates Google Analytics via the MonsterInsights plugin for visitor tracking. Due to the maintenance state, there is a lack of visible contact information, privacy policies, or terms of service, which limits the ability to assess business credibility and compliance. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details and registrant information, which further constrains trust evaluation. Technically, the site employs modern web technologies but lacks visible security headers and privacy compliance mechanisms. Overall, the site’s security posture is basic, with room for improvement in policy transparency and contact availability.

A

Anthony Veder

anthonyveder.com

58

Anthony Veder is a well-established gas shipping company with a strong focus on sustainability and innovation in the energy transportation sector. The company operates a majority-owned fleet of gas tankers worldwide, providing high-quality and flexible services to leading clients. Their website reflects a professional digital presence with clear branding and relevant content aimed at clients, partners, and potential employees. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and uses popular plugins like Gravity Forms and Yoast SEO. The site is mobile-optimized and integrates analytics tools including Google Analytics and Hotjar, supported by a cookie consent mechanism ensuring privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, DNSSEC is not enabled, and additional HTTP security headers could enhance the security posture. No explicit security policies or incident response contacts are published, which could be improved to strengthen trust. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The domain WHOIS data supports the legitimacy and long history of the business. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing security and incident response policies to further improve security and compliance.

Bright is a small Latvian digital agency specializing in creative and technical digital solutions including web design, e-commerce, animation, social media strategy, graphic design, and online advertising. The company has a professional online presence with a portfolio of notable clients and active social media engagement. The website is built on WordPress and employs modern web technologies and marketing tools such as Google Analytics, Facebook Pixel, and Trustpilot for customer reviews. Security measures include HTTPS and Google reCAPTCHA v3, though some security headers are missing. Privacy and cookie policies are present with consent mechanisms, indicating GDPR awareness. However, WHOIS data is unavailable due to query limits, limiting domain registration transparency. Overall, the site demonstrates good digital maturity and business credibility with room for security and compliance enhancements.

S

SIA Norde

norde.lv

49

SIA Norde is a well-established Latvian automotive dealership specializing in Nissan, Renault, and Dacia vehicles. Founded in 1991, it offers a comprehensive range of services including new and used car sales, servicing, body repairs, spare parts, leasing, and insurance brokerage. The website reflects a mature digital presence with multimedia content, clear navigation, and integration of official brand partner domains. Technically, the site employs modern JavaScript libraries and analytics tools, with a strong emphasis on user privacy through a detailed cookie consent mechanism. Security posture is good with HTTPS and bot protection measures, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional presentation indicate a legitimate and reputable company.

C

CHD Living

chdliving.co.uk

66

CHD Living is a well-established, family-owned healthcare provider specializing in residential, nursing, rehabilitation, and home care services primarily in Surrey and South London. Founded in 1984, the company has built a strong regional presence with multiple care homes and specialized care offerings, targeting individuals and families seeking quality care solutions. The website reflects a professional and trustworthy brand with clear service descriptions and transparent contact information. Technically, the website is built on an ASP.NET WebForms platform with modern integrations such as Google Tag Manager, Google Analytics, Microsoft Clarity, and social media tracking pixels. The site is mobile-optimized and features interactive elements like carousels and embedded videos, indicating a moderate to advanced digital maturity. However, some security headers could be enhanced to improve overall security posture. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR considerations are evident. The WHOIS lookup failed due to querying the subdomain rather than the base domain, but the website's legitimacy is supported by consistent branding and contact transparency. Overall, CHD Living presents a low-risk profile with a strong business reputation and good digital hygiene. Strategic improvements in security headers and accessibility could further enhance trust and compliance.

F

Fintelum

fintelum.com

69

Fintelum operates a compliant crypto crowdfunding platform specializing in the issuance and trading of tokenised assets, including security and utility tokens. The company targets businesses seeking compliant fundraising solutions and investors interested in high-growth tokenised projects. Their platform offers services such as KYC/AML compliance, token transfer agency, and secondary peer-to-peer trading, positioning them as a niche player in the intersection of finance and blockchain technology. The website demonstrates a professional and consistent brand presence with comprehensive legal and privacy documentation, supporting their market credibility. Technically, Fintelum's website is built on WordPress with modern web technologies including jQuery, Google Analytics, Facebook Pixel, and CookieYes for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and bot management via Cloudflare, although some security headers are not explicitly detected, suggesting room for improvement. From a security standpoint, the platform shows good practices such as cookie consent and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information is a gap. The missing WHOIS data for the domain raises concerns about domain registration transparency, although the active and professional website presence mitigates some risk. Overall, Fintelum presents a credible and functional platform with solid technical and privacy compliance foundations. Strategic recommendations include enhancing security header implementation, publishing explicit security policies, and verifying domain registration details to improve trustworthiness and compliance posture.

R

Robert Morris University

rmu.edu

79

Robert Morris University (RMU) is a well-established higher education institution based in Pittsburgh, Pennsylvania, offering a broad range of academic programs including undergraduate, graduate, doctoral, and certificate options. The university emphasizes career readiness, affordability, and a supportive campus environment that blends the benefits of a small college with access to a major city. RMU maintains a strong market position in education with recognized programs in business, nursing, cybersecurity, and engineering. The website reflects a professional and comprehensive digital presence, supporting prospective and current students, faculty, alumni, and donors.

M

MOT

mot.lv

60

MOT Latvija is a non-profit youth motivation organization operating primarily in Latvia, with origins tracing back to Norwegian Olympic athletes in 1994. The organization focuses on empowering youth through educational programs delivered in schools and local communities, aiming to foster courage, inclusion, and social resilience. The website reflects a well-structured, professionally designed platform with clear navigation and relevant content tailored to its target audience of young people and educational institutions. Technically, the site is built on WordPress, utilizing popular plugins such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and asynchronous loading of analytics scripts, but lacks advanced security headers and explicit privacy and cookie policies, which are critical for compliance and trust. WHOIS data is unavailable due to query limits, limiting domain registration transparency. Overall, the site presents a trustworthy and professional image but would benefit from enhanced privacy compliance and security disclosures.

F

Freidesk

freidesk.com

61

Freidesk is a logistics automation software provider founded in 2019, targeting shippers, carriers, and warehouses primarily in Lithuania and Poland. The company offers a SaaS platform that streamlines supply chain operations including order management, freight bookings, warehouse planning, document handling, and invoicing automation. With over 90 satisfied customers and 200,000+ placed orders, Freidesk holds a solid market position supported by positive client testimonials and recognized trust badges. Technically, the website is built on Webflow CMS with modern JavaScript frameworks like React and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is hosted via Cloudflare ensuring good performance and security. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present but no advanced GDPR indicators. Overall, the website is professional, trustworthy, and well-structured, supporting Freidesk’s business credibility.

R

Retail Data Factory

redfactory.io

64

RedFactory operates a data-driven cloud platform designed to facilitate secure sharing of retail insights between retailers and suppliers. The platform emphasizes collaboration, real-time analytics, and improved customer experience through features like On Shelf Availability Analytics and mobile incident tracking. Positioned as a modern and secure solution, it targets retail industry stakeholders seeking to optimize supply chains and sales efficiency. The website is professionally designed, mobile-optimized, and leverages modern web technologies including Tilda CMS and Google Analytics tools. Security posture is moderate with GDPR compliance stated, but lacks visible cookie consent mechanisms and security headers. The domain is privacy protected but shows no suspicious patterns, and the business appears legitimate with a domain age consistent with its founding date. Overall, the site demonstrates good business credibility and technical implementation but could improve in security best practices and privacy compliance transparency.

C

COSMETICS NORD

cosmeticsnord.com

61

COSMETICS NORD is a small-sized private label cosmetics manufacturer based in Latvia, offering premium clean beauty products and custom solutions with flexible minimum order quantities and fast lead times. The company claims 19 years of experience and has received media and celebrity recognition. The website is professionally designed using the Squarespace platform, featuring modern technologies such as Google Tag Manager and reCAPTCHA for security and analytics. Security posture is strong with HTTPS and HSTS enabled, though some security headers are missing and no explicit security policy is published. Privacy compliance is partial, with a cookie consent banner present but no privacy policy page found. Contact information is limited to a contact form and LinkedIn profile, with no direct emails or phone numbers visible. WHOIS data for the domain is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the website is functional and professional but would benefit from improved transparency and compliance documentation.

J

J. Smilgas Tehnoloģiskais birojs

smtb.lv

37

J. Smilgas Tehnoloģiskais birojs (SMTB) is a Latvian technology company specializing in supplying testing and measuring equipment from notable manufacturers such as Tektronix, Keithley, and others. They also provide technological service consultations and participate in Latvian and EU-level projects, positioning themselves as a leading representative firm in Latvia within their sector. The website content is professionally presented with clear navigation and relevant business information targeting telecommunications operators and research organizations in the electronics industry. Technically, the website uses a traditional tech stack including Bootstrap, jQuery, and various JavaScript plugins, but some libraries are outdated, which may pose security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with no visible security headers and outdated libraries, and there is no evidence of privacy or cookie policies, which impacts GDPR compliance. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the website is functional and professional but would benefit from security and compliance improvements.

K

Kaamos

kaamos.ee

53

Kaamos is a small Estonian business with an online presence established since 2010. The website is built on WordPress and uses common SEO and analytics tools such as Yoast SEO, Google Analytics, and Facebook Pixel. The company appears to have a basic digital maturity with good mobile optimization and SEO practices. However, explicit privacy and terms of service policies are not found in the analyzed content, which may affect compliance and user trust. The website implements a cookie consent mechanism via Cookiebot, indicating awareness of GDPR requirements. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks visible security headers and formal security policies. Overall, the site is functional and professional but could improve transparency and security documentation.

H

Hexatronic Group

baltronic.com

71

Hexatronic Group AB is a leading provider of fiber optic technology and connectivity solutions, serving telecommunications companies, network operators, and municipalities worldwide. Their website demonstrates a strong market position with comprehensive product offerings and a focus on enabling continuous connectivity through advanced fiber solutions. The company leverages modern digital marketing and content management technologies, including HubSpot CMS and Google Analytics, to maintain a professional and user-friendly online presence. Privacy and cookie compliance are well implemented with OneTrust integration, reflecting attention to regulatory requirements. However, the absence of publicly available WHOIS data and lack of explicit security and incident response policies present areas for improvement in transparency and trust. Overall, the website is well designed, accessible, and optimized for mobile users, supporting Hexatronic's reputation as a technologically advanced and customer-focused enterprise.

F

Finitera JSC

finitera.com

55

Finitera JSC is an international fintech company specializing in financial services targeted primarily at private individuals. The company operates in three markets, serving over 250,000 customers with a workforce exceeding 450 employees. Founded in 2017, Finitera positions itself as a leading finance partner with a focus on data-driven financial solutions. The website reflects a professional and consistent brand image with clear business information and a focus on customer engagement through job opportunities and company history. Technically, the website is built on WordPress and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO best practices. Performance is moderate, and the site uses HTTPS with a good SSL configuration, but lacks advanced security headers. From a security perspective, the site demonstrates basic best practices such as HTTPS and no visible sensitive data exposure. However, the absence of security headers, privacy and cookie policies, and incident response information indicates gaps in compliance and security maturity. The missing WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve business credibility. Overall, Finitera presents a solid fintech business with a professional online presence but requires enhancements in privacy compliance, security policies, and domain registration transparency to strengthen its security posture and trust with customers.

E

ekodoma.lv

ekodoma.lv

57

Ekodoma.lv is a Latvian-based consulting company specializing in energy efficiency and renewable energy solutions with over 30 years of experience. Their services include energy audits, energy planning, environmental permits, sustainability assessments, and related technical analyses. The website is professionally designed using the Squarespace platform, featuring clear navigation and mobile optimization. The technical infrastructure includes modern web technologies and integrations with Google services such as Analytics and Tag Manager. Security posture is strong with HTTPS and HSTS enabled, though some security best practices like additional security headers and explicit vulnerability disclosure are missing. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages. Contact information is not explicitly provided on the site, which may impact user trust. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a credible business presence in the energy consulting sector but would benefit from enhanced transparency and compliance documentation.

I

ICMA

icma.org

69

ICMA is a well-established professional association founded in 1914, serving over 10,000 local government professionals globally. The organization provides a comprehensive suite of services including membership, professional development, credentialing, publications, and global technical assistance. The website reflects a mature digital presence built on Drupal 10, integrating modern analytics and advertising technologies. Security posture is solid with HTTPS and clientTransferProhibited domain status, though improvements such as DNSSEC and explicit security headers are recommended. Privacy compliance is partial, lacking a cookie consent mechanism. Overall, ICMA demonstrates high business credibility and professionalism with a strong market position in the government and non-profit sectors.

Dienas Žurnāli is a Latvian media publishing company specializing in a wide range of magazines and newspapers covering topics such as gardening, health, science, history, and culture. The company operates both print and digital distribution channels, including a dedicated digital kiosk platform (ekiosks.lv) for subscriptions and purchases. The website is built on Drupal 9, featuring a well-structured content layout with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, the site presents a professional and trustworthy media business with moderate technical maturity and compliance with privacy regulations.

G

Green Wire Media

greenwiremedia.com

54

Green Wire Media is a small, established digital marketing and web development agency founded in 2008. They offer a broad range of services including website development, SEO, PPC campaigns, consulting, and white label solutions for agencies. The company operates fully remotely and emphasizes fair pricing and client satisfaction. Their market position is that of a reliable service provider with a focus on quality and measurable results. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics, Facebook Pixel, and other marketing tools. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

S

SIA “Agile & Co”

agile.lv

38

Agile & Co is a Latvian technology consultancy firm specializing in agile ICT project management, security research, and capital services. The company targets businesses requiring agile and security-focused solutions, positioning itself as a niche provider with ISO 9001 certification indicating quality management. The website is built on WordPress with common plugins and libraries, including Google Analytics and reCAPTCHA for analytics and spam protection. However, the site currently displays a 404 error page, limiting content availability and user experience. Security posture is moderate with HTTPS enabled and reCAPTCHA in use, but lacks important security headers and visible privacy policies, which impacts compliance and trust. WHOIS data is unavailable due to query limits, reducing domain trust assessment capabilities. Overall, the site shows basic professionalism but requires improvements in content availability, security policies, and transparency to enhance trust and compliance.

Z

ZTC | Rūpnieciski ražotas koka karkasa mājas

ztc.lv

47

ZTC is a Latvian company specializing in the industrial production and assembly of wooden frame houses and CLT panel homes, serving clients across Europe. With over 30 years of experience, ZTC positions itself as a leading manufacturer in its sector, offering customized and sustainable building solutions. The website reflects a professional business with clear branding, multilingual support, and a portfolio showcasing completed projects. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the site is credible and well-maintained, with moderate tracking and compliance indicators.

K

KGK Estonia

kgk.ee

57

KGK Estonia operates a professional website primarily targeting Estonian-speaking users. The company has maintained its domain since 2010, indicating a stable presence. The website is built on WordPress and integrates modern technologies such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, reflecting a moderate level of digital maturity. The site implements GDPR-compliant cookie consent mechanisms and provides detailed cookie declarations, demonstrating attention to privacy compliance. However, explicit privacy and security policies are not directly hosted on the site, relying instead on external Cookiebot links. No direct contact information or incident response contacts are visible, which may limit user trust and support accessibility. The technical infrastructure is hosted by DBWeb OÜ, consistent with the domain registration data.

G

GA technology

gatechnology.lv

46

GA technology is a Latvian company specializing in the sales and servicing of CNC machining equipment, targeting industrial clients requiring advanced metal processing machinery. The website presents a professional and well-structured digital presence built on WordPress, featuring detailed product categories and service offerings including 24-hour technical support for local clients. The technical infrastructure leverages common web technologies such as jQuery, UIkit, and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and published privacy policies, which are critical for compliance and trust. The absence of WHOIS data limits domain legitimacy verification, posing a moderate risk in trust assessment. Overall, the site is functional and credible but would benefit from enhanced security and compliance measures.

#

#Neklusē

nekluse.lv

50

The website nekluse.lv represents #Neklusē, a Latvian non-profit social project dedicated to reducing bullying in schools across Latvia. It offers free solutions for schools, educational materials, research, and support for students, parents, and school staff. The project maintains a strong presence in the Latvian education and social sectors, positioning itself as a leading initiative against bullying with active community engagement and partnerships with governmental and psychological support organizations. Technically, the website is built on WordPress with Elementor and several plugins including GiveWP for donations and Stripe for payment processing. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized, well-structured, and uses modern web technologies, although some security headers could be improved. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security-wise, the site enforces HTTPS and uses secure payment gateways but lacks explicit security headers and a vulnerability disclosure policy. No WHOIS data was available due to query limits, but the domain appears legitimate and consistent with the business purpose. Overall, the site demonstrates a solid security posture with room for improvement in header policies and incident response transparency. The overall risk is low given the non-profit nature, absence of suspicious indicators, and proper use of security and privacy best practices. Strategic recommendations include enhancing security headers, publishing a security.txt file, and maintaining up-to-date software to mitigate potential vulnerabilities.

T

Thomson Furniture

thomsonfurniture.lv

55

Thomson Furniture is a leading Latvian office furniture provider offering a comprehensive range of high-quality office furniture products and services, including design, project implementation, and long-term furniture rental. The company targets business clients, public institutions, and private customers, positioning itself as a trusted partner with a strong market presence. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and could improve in this area. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits full domain legitimacy verification.

Lekta.ai is a Polish technology company specializing in conversational AI virtual agents designed to enhance customer care across multiple channels including voice and text. The company targets enterprises seeking scalable and secure AI solutions, with a business model focused on B2B technology provision. The website reflects a professional and consistent brand presence with clear contact information and a focus on enterprise readiness. Technically, the website employs modern web technologies such as HTML5 video, Google Fonts, and integrates Google Analytics and Tag Manager for user tracking. Hosting appears to be supported by Google Cloud DNS infrastructure. The site is moderately optimized for performance and mobile responsiveness but lacks advanced accessibility features. From a security perspective, the domain is registered consistently with the business entity and country. However, the website lacks published privacy and security policies, security headers, and incident response information, which are important for compliance and trust. DNSSEC is not enabled, representing a potential DNS security gap. User tracking is moderate due to Google Analytics usage, but privacy compliance is limited by the absence of a privacy policy. Overall, Lekta.ai presents a credible and professional business with room for improvement in privacy compliance and security posture. Strategic enhancements in policy publication, security headers, and DNS security would strengthen trust and compliance.